Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: Te4gotO4lt+W+df+4UaQT6YNb1ZpzibXxuJp5Y9Rhnk=
Subject key identifier: AF:FE:17:6E:E2:14:ED:BB:B6:96:BD:81:05:53:4D:84:E5:2E:66:BC
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01984AAEC45C3EBEEEAEAF68955C9288B3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 07:00:24 +0000
Manifest this update: Sun 27 Jul 2025 07:00:24 +0000
Manifest next update: Mon 28 Jul 2025 07:00:24 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: NturpvXtUOorquPmQtUBHCiOsVHOimCqVk7BpQD5K9k=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c4:5c:3e:be:ee:ae:af:68:95:5c:92:88:b3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Jul 27 07:00:24 2025 GMT
Not After : Jul 28 07:00:24 2025 GMT
Subject: CN=affe176ee214edbbb696bd8105534d84e52e66bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:6d:c8:07:d8:e3:63:0c:61:21:f4:f3:4f:
f6:2e:90:0b:1d:7d:4f:49:e9:c5:04:88:e9:48:4f:
cd:97:31:66:a0:87:8a:c2:5d:76:a9:cc:5d:c7:94:
69:0c:c1:16:05:14:8e:26:8e:d1:70:ad:20:7c:c8:
66:b3:9d:5f:71:b5:4e:b5:08:05:01:92:3f:37:29:
da:3c:c3:b1:ff:22:f1:98:b0:31:4f:c6:fa:8f:18:
7f:6b:36:0a:96:61:98:80:bb:58:c0:17:a3:d0:94:
57:e0:42:3f:a5:14:2d:e8:1c:89:93:78:49:e8:74:
b4:d5:25:19:fe:49:47:02:11:6d:59:19:41:bc:62:
47:bc:1b:1f:46:d9:9b:c8:02:00:02:9e:8f:37:26:
e2:a7:33:8f:4c:ac:75:76:23:96:b3:91:4e:27:d2:
78:2c:99:0e:ea:ca:21:45:7b:a7:34:86:d5:81:89:
fa:d0:a1:c4:84:cc:57:0a:6f:2f:0d:81:13:69:7e:
74:ee:0e:39:56:41:4f:62:10:a0:7f:41:12:d8:56:
6b:20:d4:71:5f:21:d1:83:11:f3:5e:8a:59:3c:59:
32:4d:fd:58:9f:b3:1f:15:25:04:26:28:0f:6e:4f:
03:9e:a7:28:6f:9f:12:b8:45:95:27:bf:9c:97:cf:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:17:6E:E2:14:ED:BB:B6:96:BD:81:05:53:4D:84:E5:2E:66:BC
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:2b:1d:5c:14:d4:63:23:98:d7:33:90:3b:83:36:d1:7a:
4f:bb:1e:26:54:6b:01:3e:c3:c2:75:0b:6a:b7:6e:3d:04:e3:
1f:01:fa:3f:d1:90:2d:fd:47:b8:86:2c:78:f4:77:69:a2:60:
0b:dd:fb:79:eb:37:31:7c:61:ee:92:43:29:36:b9:0f:c0:0c:
22:66:c2:05:d7:7e:f0:d3:0a:1d:92:ea:e2:a4:97:df:e6:56:
a3:b5:6f:6b:2e:9d:b1:ae:b7:3f:60:da:6d:ca:69:b4:6d:a9:
85:ca:6f:e5:90:f0:b2:e8:56:c4:d3:ad:00:02:22:8a:c5:27:
c0:c3:44:63:0d:3a:8f:d3:83:d7:e3:75:15:a6:8e:d2:81:6e:
d5:c6:8d:dd:7f:55:41:87:fc:fb:e4:7b:44:65:ae:91:9f:d3:
b2:66:37:45:2d:cf:d9:64:6d:49:42:4c:89:7d:ef:03:ad:02:
68:1d:1c:86:28:20:3c:92:30:c6:eb:7f:9c:19:87:be:6b:47:
68:56:79:31:01:73:5c:a1:27:34:57:40:1a:c1:ce:fb:9c:7b:
db:1d:1d:cf:a2:19:73:6a:cb:3c:11:21:1b:d6:10:81:07:7d:
bb:80:cd:6a:6a:04:20:7e:d5:a0:01:81:d4:3b:09:cb:05:48:
35:f5:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:20 2025 by rpki-client